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IN THE CLAIMS: 

The text of all pending claims, (including withdrawn claims) is set forth below. Cancelled 
and not entered claims are indicated with claim number and status only. The claims as listed 
below show added text with underlining and deleted text with strik e through . The status of each 
claim is indicated with one of (original), (currently amended), (cancelled), (withdrawn), 
(Previously Presented), (previously presented), or (not entered). 

Please CANCEL claims 12, 13, 16, 18 and 19, AMEND claims 11, 14, 15, 17, and 20, 
and ADD new claim 22 in accordance with the following: 

Claims 1-10 (cancelled) 

11 . (Currently Amended) A security module for encrypting a telephone conversation 
between at least one first telecommunication terminal using a Voice over IP (VoIP) system in a 
packet-oriented data network^ and at least one second telecommunication terminal in a 
telephone network that is at least one of analog and digital and is connected to the packet- 
oriented network via a gateway, the packet-oriented data network transporting data packets 
using an encrypted transport protocol with keys for the encrypted transport protocol exchanged 
using a key exchange protocol, said security module being connected into a connecting line of 
one of the first and second telecommunication terminals and comprising: 

a protocol processing unit processing messages of the key exchange protocol as well as 
data packets transported using the encrypted transport protocol, converting voice signals, 
created by the one of the first and second telecommunication terminals at which said security 
module is connected, into data packets for transport via the encrypted transport protocol and 
converting data packets, arriving at said security module after transport via the encrypted 
transport protocol, into voice signals; 

a modem connection unit, used when said security module is connected in a connecting 
line at a second telecommunication terminal, setting up a modem connection between the 
second telecommunication terminal and at least one of the gateway and another second 
telecommunication terminal, with the data packets being transported using the encrypted 
transport protocol, along with messages of the key exchange protocol, via the modem 
connection , wherein 

a point-to-point protocol connection is used over the modem connection in transporting 
the data packets using the encrypted transport protocol, as well as messages of the key 
exchange protocol, and 
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the encrypted transport protocol is Secure Real Time Transport Protocol . 



12-13. (Cancelled). 

14. (Currently Amended) A security module in accordance with claim-43 11, wherein the 
key exchange protocol is multimedia Internet keying. 

15. (Currently Amended) A security module in accordance with claim44 11. wherein for 
a telephone conversation, messages of the key exchange protocol are transported via a session 
initiation protocol, and 

wherein said protocol processing unit processes the session initiation protocol. 

16. (Cancelled). 

17. (Previously Presented) A security module in accordance with claim4S 11. wherein 
the telephone network is an ISDN network, and said modem connection unit sets up the modem 
connection over a B-channel in the ISDN network. 

18-19. (Cancelled). 

20. (Previously Presented) A security module in accordance with claim-49 11. wherein 
the packet-oriented network is an Internet protocol-based data network and a local area network, 
and said modem connection unit sets up the modem connection in accordance with at least one 
of a V90 and a V92 standard. 

21. (Previously Presented) A security module in accordance with claim 20, wherein said 
security module is connected into a connecting cable between a telephone handset and the one 
of the first and second telecommunication terminals. 

22. (New) A security module used in a heterogeneous network including a IP-based 
Local Area Network and a public Time Division Multiplexing telephone network, comprising: 

a protocol processing unit enabling communication between terminals of the a IP-based 
Local Area Network using an encrypted transport protocol with keys for the encrypted transport 
protocol exchanged using a key exchange protocol, by converting voice signals received from a 
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terminal of the telephone network into data packets for transport via the encrypted transport 
protocol, and converting data packets, arriving at said security module after transport via the 
encrypted transport protocol, into voice signals; and 

a modem connecting any telecommunication terminal of the telephone network with the 
protocol processing unit, to ensure communication between the telecommunication terminal of 
the telephone network and any terminal of the IP-based Local Area Network using the encrypted 
transport protocol. 
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